Доброго вечора. підскажіть в чому проблема? після того як закінчив установку nodeny інтернет на компі кліента працював а вже як востановив базу даних кліентів він перестав працювати якщо виконати
ipfw table 100 add 0.0.0.0/0
то він працює
ipfw show
00050 4964 499447 allow tcp from any to me dst-port 22
00051 4584 918683 allow tcp from me 22 to any
00110 196525 730332854 allow ip from any to any via lo0
00120 201542 54222776 skipto 1000 ip from me to any
00130 192 10894 deny icmp from any to any in icmptypes 5,9,13,14,15,16,17
00160 2379265 237570343 skipto 2000 ip from any to me
00200 138476257 113855018057 skipto 500 ip from any to any via msk0
00300 57312975 7328840000 skipto 4500 ip from any to any in
00400 83417068 107258492499 skipto 450 ip from any to any recv msk0
00420 7858 872491 divert 1 ip from any to any
00450 83424926 107259364990 divert 2 ip from any to any
00490 83424926 107259364990 allow ip from any to any
00500 83418025 107258592323 skipto 32500 ip from any to any in
00510 55064161 6598552233 divert 1 ip from any to any
00540 54986949 6597004837 allow ip from any to any
01000 74692 23275080 allow udp from any 53,7723 to any
01010 298 76180 allow tcp from any to any setup keep-state
01020 158575 30911528 allow udp from any to any keep-state
01100 42688 24505571 allow ip from any to any
02000 0 0 check-state
02010 5568 548656 allow icmp from any to any
02020 38430 47050314 allow tcp from any to any dst-port 22,80,443,5006
02030 0 0 allow tcp from table(101) to any dst-port 3306
02050 2154992 158970229 deny ip from any to any via msk0
02060 92417 5307461 allow udp from any to any dst-port 53,7723
02100 13055 1112216 deny ip from any to any
04500 55085412 6600557726 allow ip from any to table(100)
05000 0 0 skipto 18502 ip from table(24) to table(14)
05001 0 0 allow ip from table(44) to table(14)
18500 2160 763875 fwd 127.0.0.1,8080 tcp from any to any dst-port 80
18501 2222963 727171080 deny ip from any to any
18502 0 0 pipe tablearg ip from table(24) to any
32000 0 0 deny ip from any to any
32490 2435 346488 deny ip from any to any
32500 83418024 107258592199 allow ip from table(100) to any
33000 0 0 skipto 46501 ip from table(14) to table(34)
33001 0 0 allow ip from table(14) to table(44)
46500 1 124 deny ip from any to any
46501 0 0 pipe tablearg ip from any to table(34)
60000 0 0 deny ip from any to any
65535 53 8124 deny ip from any to any
cat /etc/pf.conf
ext_if = "msk0"
set limit states 128000
set optimization aggressive
nat pass on $ext_if from 10.0.0.0/8 to any -> ($ext_if)
nat pass on $ext_if from 192.168.0.0/16 to any -> ($ext_if)
пінг на 8.8.8.8 іде а на ya.ru або інший сайт ні
